anonymize-doc
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands in
SKILL.mdto manage dependencies viapipand install necessary NLP models forspaCy. These operations are transparent and limited to the skill's requirements. - [EXTERNAL_DOWNLOADS]: The skill downloads standard open-source Python packages (scrubadub, spacy, faker) and official language models from spaCy's repositories. These are well-known, trusted resources required for the skill's primary function of PII detection.
- [SAFE]: The code implements industry-standard privacy protections. The
anonymize.pyscript preserves original files and generates audit logs, including warnings to secure mapping files when reversible strategies (pseudonymization/tokenization) are used. It also follows security best practices by recommending the exclusion of audit logs from version control via.gitignore.
Audit Metadata